- anti-abuse-wg - mailman.ripe.net

The new Security Working Group
by Marita Phelan 08 Nov '24

08 Nov '24

Dear colleagues, The proposal to recharter the Anti-Abuse Working Group as the new Security Working Group is now being implemented. As part of this, the Anti-Abuse mailing list subscribers are being migrated to the new Security mailing list. The Anti-Abuse mailing list will be archived. There is no action needed from your side. Please make sure to allow emails from <security-wg(a)ripe.net> and use this address should you like to email the Security Working Group. Kind regards, Marita Phelan RIPE NCC

1 1

Agenda Update:
by Brian Nisbet 29 Oct '24

29 Oct '24

Colleagues, Some updates for the WG session this afternoon. We hope to see lots of you in the room, but please remember you can follow along online at https://ripe89.ripe.net/ A. Administrative Matters * Welcome * Scribe, Chat, Stenography * MeetEcho, Mic & Chat Etiquette * Ratings Where Appropriate * Approve Minutes from RIPE 88 * Finalise agenda * Code of Conduct B. Update * B.1. AA-WG Recharter & Mailing List Changes * B.2. Working Group Chair Selection * B.3. Recent List Discussion C. Policies - *C.1. D. Interactions - *D.1. Engaging with Governments-Handling Requests for Information - Hisham Ibrahim, RIPE NCC E. Presentation - *E.1. Unveiling Domain Blocklist Performance - An Analysis over Four Years - Antonia Affinito, University of Twente *E.2. The hosting of Live Piracy, the good bad and not so ugly? Lee Kent, BeIN & Andrew Willatt, Premier League X. A.O.B. Z. Agenda for RIPE 90 Regards, Brian, Markus & Tobias Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Draft Agenda for RIPE 89
by Brian Nisbet 28 Oct '24

28 Oct '24

Colleagues, Please find below the draft agenda for the Security WG meeting at RIPE 89, which is taking place on Tuesday 29th October at 16:00 CET. If you have any items you wish to add, please contact aa-wg-chair(a)ripe.net and let us know. (We'll be updating all the email addresses after the meeting!) A. Administrative Matters * Welcome * Scribe, Chat, Stenography * MeetEcho, Mic & Chat Etiquette * Ratings Where Appropriate * Approve Minutes from RIPE 88 * Finalise agenda * Code of Conduct B. Update * B.1. AA-WG Recharter * B.2. Working Group Chair Selection * B.3. Recent List Discussion C. Policies - *C.1. D. Interactions - *D.1. E. Presentation - *E.1. Unveiling Domain Blocklist Performance - An Analysis over Four Years - Antonia Affinito, University of Twente *E.2. The hosting of Live Piracy, the good bad and not so ugly? Andrew Willatt, BeIN X. A.O.B. Z. Agenda for RIPE 90 Regards, Brian, Markus & Tobias Co-Chairs, Security WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

2 4

civil action against End Users
by denis walker 21 Oct '24

21 Oct '24

Colleagues I am hoping there are some lawyers or legal experts in this WG. I would like to know if it is possible for me, as a private individual, to bring a civil case against an End User for damages because of some abusive behaviour? To do so I would need to know who the End User is. A consequence of the policy change 2023-04 means that the End User details may not be documented in the RIPE Database. As far as I can determine (from googling) a court order can only be served on the LIR to identify the End User by an LEA in a criminal case. I have tried to find out what I can do in a civil case. Most of the information is such heavy legal stuff, I don't have the training to interpret it. For example: https://www.unidroit.org/wp-content/uploads/2022/07/English-Black-letter-6-… Model European Rules of Civil Procedure Rule 53 (5) A claimant may apply, in their statement of claim, for access to evidence under the custody or control of a defendant or nonparty and which are to be offered in support of the claimant’s allegations. But this would mean taking the LIR to court in a separate civil legal action in order to identify the End User. Then I could start civil legal proceedings in court against the End User for damages. The LIR and the End User may be in separate countries, both different to the country I reside in. So one of the consequences of 2023-04 was to close the door on any civil legal action against an End User who engages in abusive behaviour with an individual or small business that falls short of criminal activity. Would that be a reasonable conclusion? cheers denis ======================================================== DISCLAIMER Everything I said above is my personal, professional opinion. It is what I believe to be honest and true to the best of my knowledge. No one in this industry pays me anything. I have nothing to gain or lose by any decision. I push for what I believe is for the good of the Internet, in some small way. Nothing I say is ever intended to be offensive or a personal attack. Even if I strongly disagree with you or question your motives. Politicians question each other's motives all the time. RIPE discussion is often as much about politics and self interest as it is technical. I have a style of writing that some may not be familiar with, others sometimes use it against me. I also have OCD. It makes me see the world slightly differently to others. It drives my mind's obsessive need for detail. I can not change the way I express my detailed opinions. People may choose how to interpret them. ========================================================

3 3

WG Co-Chair Selection Process Update
by Brian Nisbet 18 Oct '24

18 Oct '24

Colleagues, The deadline has passed for nominations for the two Security WG Co-Chair positions that will be open at RIPE 89, due to the ending of Markus' & Tobias' terms. I have received two nominations/statements of williingness to volunteer; one from Markus and one from Tobias. At this point I would ask the members of the Working Group to let me know if they support the re-selection of the two outgoing Co-Chairs or if they have any other comments. The process will be formally concluded at RIPE 89 in Prague. Thank you, Brian Co-Chair, RIPE Security WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

5 4

Re-Chartering Discussion: Consensus Decision & Next Steps
by Brian Nisbet 14 Oct '24

14 Oct '24

Good Afternoon, Following on from the list discussion pre-RIPE 88, the discussion at the meeting, and the subsequent refining of the proposed charter and further discussion, the WG Co-Chairs, after discussion with the RIPE Chair Team, are declaring consensus on the re-chartering and re-naming of the WG. The charter is as posted to the group on the 29th of July by Markus: ************* The Security Working Group is committed to fostering collaboration, sharing best practices, and addressing security challenges within the RIPE community. The primary objective of the WG is to enhance the security, resilience, and stability of the Internet infrastructure within our region. Tackling abuse of Internet infrastructure and resources is a core goal of the WG, as well as: - Collaborating with stakeholders to develop and advocate for best practices, guidelines, and standards for securing Internet resources - Facilitating information sharing and cooperation among relevant entities - Providing education, training, and outreach initiatives to raise awareness of security issues and promote best practices adoption ************* and we are confirming that the new name of the WG will be the RIPE Security Working Group. Our first hybrid meeting will be at RIPE 89 in Prague and, between then and now we'll sort out the logistics of the change including mailing lists, websites, fancy logos, branded merchandise etc. etc. There will be further communications on this, of course, but the current plan is to migrate this list, in the whole part, to the new WG, meaning no action would be required on the part of the subscribers. More on that as we have it. I'd like to thank my fellow Co-Chairs, the RIPE Chair Team, the NCC and, of course, all of you, the wonderful WG members, for all your help with this discussion, decision & process. I would also like to thank everyone who has been a part of the Anti-Abuse Working Group over the years for your discussion and work. A lot has happened and been done since we rechartered from Anti-Spam to Anti-Abuse in 2008 and it absolutely would not have happened without you all! Thank you, Brian Co-Chair RIPE <s>Anti-Abuse</s> Security Working Group Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

4 4

RIPE Anti-Abuse WG Co-Chair Selection
by Brian Nisbet 10 Oct '24

10 Oct '24

Colleagues, Both Marcus' & Tobias' 3 year terms as AA-WG Co-Chairs will come to an end at RIPE 89. As per our current procedure this email is the start of the selection process for up to two Co-Chair positions for the WG and I would like to invite nominations (self- or otherwise) before 17:00 CEST on Thursday 17th October. More information on the process can be found here: https://www.ripe.net/community/wg/active-wg/anti-abuse/anti-abuse-wg-chair-… Ideally Co-Chairs will be chosen by consensus within the WG, but if this cannot be managed, a vote will take place at RIPE 89. As per the AA-WG process, we will not be announcing the names of any nominees until the nomination period is over. Once we announce the nominees there will be time for discussion, expressions of support etc. on the mailing list ahead of RIPE 89. The outcome of the process will be announced during the AA-WG session on Tuesday 29th October between 16:00 - 17:30 CET. You can find out more about the role of WG Co-Chairs at: https://www.ripe.net/publications/docs/ripe-692 If you have any questions, or nominations, please do not hesitate to contact me. Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

2 5

Fwd: EU set up a CRA Expert Group + consultations on EU Cybersecurity Act
by Romain Bosc 24 Sep '24

24 Sep '24

Dear all, Just to flag that the European Commission has launched a call for applications to join a newly established Expert Group on the cybersecurity of products with digital elements (CRA Expert Group) -- the group will assist and advise the Commission on issues relevant to the implementation of the Cyber Resilience Act (CRA) -- deadline to apply is on 17 October 2024: https://digital-strategy.ec.europa.eu/en/news/call-applications-cyber-resil… In addition, the European Commission has opened two consultations relating to the implementation of the EU Cybersecurity Act adopted in June 2019, which introduces an EU-wide cybersecurity certification framework for ICT products, services and processes. One is about the Draft Implementing Regulation relating to the European Common Criteria-based cybersecurity certification scheme (EUCC), and state-of-the-art documents specifying evaluation methods, techniques and tools that apply to the certification of ICT products, or security requirements: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… The other consultation is on the Draft Implementing Regulation establishing the circumstances, formats and procedures for notifications relevant to Conformity Assessment Bodies (CABs): https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… Any questions, please let us know. All best Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

1 0

ORG-NL14-RIPE - Netcetera Limited (Isle of Man)
by Ronald F. Guilmette 05 Sep '24

05 Sep '24

Please be advised that Netcetera Limited (Isle of Man) aka ORG-NL14-RIPE does not currently accept spam reports if a complete copy of the spam message being reported is included: <abuse(a)netcetera.co.uk>: host mx.spamexperts.com[38.89.254.156] said: 550 A URL in this email (subrigneten . co . in) is listed on https://spamrl.com/. Please resolve and retry (in reply to end of DATA command) [ part 2 - message/delivery-status - Delivery report 474B (suppressed) ] [ part 3 - message/rfc822 - Undelivered Message 16KB ] Number is required after -h Relevant IP blocks for this network are as follows: 81.27.96.0/20 146.247.48.0/20 146.247.53.0/24 146.247.54.0/24 146.247.55.0/24 146.247.56.0/24 Regards, rfg

1 0

Call For Agenda Items - RIPE 89
by Brian Nisbet 02 Sep '24

02 Sep '24

Colleagues, RIPE 89 - https://ripe88.ripe.net/ - will be taking place in late October in Prague, and there will be an Anti-Abuse WG session at the meeting on the afternoon of Tuesday 29th October. Registration for the meeting, running from the 28th October - 1st November, is open. Markus, Tobias and I would invite people to submit topics for discussion, policy proposals, presentations for general enlightenment and, of course, work items for the working group. Speakers & presenters can either be present in Prague or reaching us live via the Internet! The Anti-Abuse WG session will be taking place on the 29th of October at 16:00 CET. As always you can reach us at aa-wg-chair(a)ripe.net Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0